[Snort-users] Pullpork, so rules, and upgrades
jlay at ...13475...
Thu Apr 14 18:52:14 EDT 2016
So....I'm sure we've all seen this before:
Apr 14 22:44:11 idsdev pulledpork: FATAL: An error occured:
ERROR: The dynamic detection library
/usr/local/lib/snort_dynamicrules/protocol-icmp.so version 1.0 compiled
with dynamic engine library version 2.4 isn't compatible with the
current dynamic engine library
/usr/local/lib/snort_dynamicengine/libsf_engine.so version 2.6.
The fix, easy enough, is to:
sudo rm *.so
tar xvf snortrules-snapshot-2982.tar.gz
#depending on distro and arch:
sudo cp *.so /usr/local/lib/snort_dynamicrules/
and rerun pulledpork. My question is, why doesn't pulledpork do this?
I'm running 0.7.1....just curious really. Thank you.
More information about the Snort-users